Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File:                     bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier:          A4t5Fs6dx3o9qoic/6EKLan11lqgB2phOteauUqSopo=
Subject key identifier:   A4:E9:C7:C9:13:A4:13:88:1C:7C:88:B8:2C:71:5A:EE:61:C5:31:F3
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer:       /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial:       019D9BF5C982BBCD43EE23B52197BE1AB33E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number:          0E95
Signing time:             Fri 17 Apr 2026 15:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 15:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 15:01:09 +0000
Files and hashes:         1: HsWvQkqyqgqDj3X8qhIGW0Flnwc.roa (hash: jMcB1wDEamsFEqTFzPF8IyJgQTNPejP9vTcaIBOsBpk=)
                          2: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: rIiAwhm0DUXOY/L1RAOj5uCp61LLJOtN1mgyNYr4dHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:c9:82:bb:cd:43:ee:23:b5:21:97:be:1a:b3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
        Validity
            Not Before: Apr 17 15:01:09 2026 GMT
            Not After : Apr 18 15:01:09 2026 GMT
        Subject: CN=a4e9c7c913a413881c7c88b82c715aee61c531f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:11:99:d2:6b:5a:8b:bf:13:02:ec:2b:e7:52:
                    71:d9:5b:cc:ec:38:61:7d:37:c1:22:83:5b:a5:80:
                    0c:f7:12:11:1f:53:82:ce:e3:9c:b4:b4:4e:46:cf:
                    11:60:23:66:8c:a7:6c:19:40:8b:e0:ae:e1:08:be:
                    41:e8:a4:3d:a9:d1:f6:47:c7:b3:6f:1a:9f:b1:d0:
                    26:44:ee:6a:53:99:4d:a1:f0:59:b5:6f:cc:18:4c:
                    27:c6:16:87:0e:2c:5f:e0:c5:64:4c:59:b9:c5:88:
                    58:f0:0c:ad:25:ff:c2:e0:06:36:1e:39:cd:49:3e:
                    b6:d7:b6:51:17:b9:a2:92:9f:cd:fd:76:64:08:39:
                    e5:c0:df:34:c0:36:00:a4:62:42:06:30:3a:2e:ce:
                    81:9c:0d:c6:1d:9f:db:47:f0:61:24:35:13:f3:ef:
                    ce:87:1a:85:39:8d:86:f4:dd:bc:98:5c:b3:c3:53:
                    20:57:b2:a0:d5:03:16:64:f8:66:1f:a8:c8:3f:e4:
                    a4:50:f2:1d:62:f8:0c:95:43:09:50:fb:ea:5f:71:
                    f6:49:a2:71:0d:38:f5:1b:df:47:d6:97:ee:71:e8:
                    93:9c:b9:06:40:9c:7e:a6:d4:ca:a8:3c:44:3b:8a:
                    34:70:cc:1c:ac:57:38:95:30:c5:8e:fc:ce:c0:c6:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E9:C7:C9:13:A4:13:88:1C:7C:88:B8:2C:71:5A:EE:61:C5:31:F3
            X509v3 Authority Key Identifier:
                keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:18:c9:43:f6:e4:d2:a6:a5:da:29:a2:32:fb:52:99:9f:1a:
         87:35:71:b9:4d:a6:3c:e0:07:58:f7:4c:c4:c7:a3:da:09:d3:
         4c:1a:6b:c0:c2:8f:96:b5:ad:de:99:6c:72:2f:6a:4b:48:ad:
         6e:28:1b:ec:1c:b2:1f:0c:1e:79:fe:99:1a:e6:d6:46:3a:12:
         eb:78:a3:2a:ea:a4:fa:b0:b0:cc:35:e8:fa:ab:bf:f0:f4:c7:
         fc:93:76:90:0e:ac:56:4b:a5:da:11:20:55:03:53:53:c8:99:
         61:76:aa:07:a9:aa:25:78:34:c0:b2:d5:1e:41:68:3c:0e:18:
         da:6a:3b:af:8a:a2:31:8f:3b:43:dc:34:8a:7f:a9:26:3d:f4:
         37:9e:49:ca:da:9f:c3:8f:8e:98:a6:b0:63:28:d2:a3:46:8c:
         c7:d1:de:eb:31:51:34:7f:8a:28:42:68:cf:a5:aa:aa:b5:be:
         03:29:05:29:f2:2b:9a:65:27:43:0f:da:4f:0e:55:f9:c6:81:
         1c:ff:f2:e3:fb:9c:e0:4b:62:53:a7:a6:44:06:2e:88:93:b5:
         4a:28:85:3c:f8:a7:a4:f2:8d:8d:a3:c2:f8:c1:ac:6d:21:15:
         e8:a4:77:9c:3c:68:84:92:19:65:20:d4:e1:18:20:19:05:bc:
         ac:9d:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:52:46 2026 by rpki-client